Need help to remove Favourlinks.com |
![]() ![]() |
Need help to remove Favourlinks.com |
Jan 31 2007, 09:34 AM
Post
#1
|
|
|
New Member ![]() Posts: 2 OS: Windows XP |
Whenever I connect to the internet favourlinks.com comes up as my homepage. I have bee unable to remove it. Hope the following logs can help you to advise me how to remove this malware.
AVG Anti-Spyware - Scan Report --------------------------------------------------------- + Created at: 19:52:47 30.01.2007 + Scan result: HKU\S-1-5-21-2631467380-3590208886-1251959399-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A1DDC19-5893-43AB-A73F-F41A0F34D115} -> Adware.Generic : Cleaned with backup (quarantined). ::Report end Logfile of HijackThis v1.99.1 Scan saved at 17:27:10, on 30.01.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\SYSTEM32\SVCHOST.EXE C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SYSTEM32\SPOOLSV.EXE C:\Programfiler\Fellesfiler\LightScribe\LSSrvc.exe C:\PROGRA~1\TRENDM~1\INTERN~1\PCCTLCOM.EXE C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe C:\PROGRA~1\TRENDM~1\INTERN~1\TMPROXY.EXE C:\PROGRA~1\TRENDM~1\INTERN~1\TMPFW.EXE C:\Programfiler\Fellesfiler\Symantec Shared\Security Center\SymWSC.exe C:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Programfiler\Java\jre1.5.0_10\bin\jusched.exe C:\Programfiler\Hp\HP Software Update\HPWuSchd2.exe C:\Programfiler\Synaptics\SynTP\SynTPEnh.exe C:\Programfiler\hpq\HP Wireless Assistant\HP Wireless Assistant.exe C:\Programfiler\HPQ\Quick Launch Buttons\EabServr.exe C:\Programfiler\Fellesfiler\InterVideo\SchSvr\SchSvr.exe C:\Programfiler\InterVideo\Common\Bin\WinRemote.exe C:\Programfiler\Trend Micro\Internet Security 14\pccguide.exe C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe C:\Programfiler\SlipStream Web Accelerator\slipcore.exe C:\Programfiler\QuickTime\qttask.exe C:\Programfiler\iTunes\iTunesHelper.exe C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRAMFILER\MESSENGER\MSMSGS.EXE C:\Programfiler\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe C:\Programfiler\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Programfiler\MSN Toolbar Suite\DS\02.05.0001.1119\nb-no\bin\WindowsSearch.exe C:\Programfiler\MSN Toolbar Suite\DS\02.05.0001.1119\nb-no\bin\WindowsSearchIndexer.exe C:\Programfiler\iPod\bin\iPodService.exe C:\PROGRAMFILER\INTERNET EXPLORER\IEXPLORE.EXE C:\Programfiler\HPQ\SHARED\HPQWMI.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\System32\svchost.exe C:\DOCUME~1\JOHNTA~1\LOKALE~1\Temp\Midlertidig mappe 4 for hijackthis[1].zip\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.shtormmovies.com/ to verify your age, REQUIRED! WARNING! Adult pictures are featured in this site. Only adults permitted beyond this point! Are you at least 18 years old R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Tiscali R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: PBlockHelper Class - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} - C:\Programfiler\SlipStream Web Accelerator\PBHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programfiler\google\googletoolbar4.dll O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programfiler\MSN Toolbar Suite\TB\02.05.0000.1105\nb-no\msntb.dll O3 - Toolbar: HP-visning - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Programfiler\HP\Digital Imaging\bin\HPDTLK02.dll O3 - Toolbar: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programfiler\MSN Toolbar Suite\TB\02.05.0000.1105\nb-no\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programfiler\google\googletoolbar4.dll O4 - HKLM\..\Run: [ATIPTA] "C:\Programfiler\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programfiler\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Programfiler\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Programfiler\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Programfiler\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe O4 - HKLM\..\Run: [eabconfg.cpl] C:\Programfiler\HPQ\Quick Launch Buttons\EabServr.exe /Start O4 - HKLM\..\Run: [Cpqset] C:\Programfiler\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [Home Theater SchSvr] C:\Programfiler\Fellesfiler\InterVideo\SchSvr\SchSvr.exe O4 - HKLM\..\Run: [WINREMOTE] C:\Programfiler\InterVideo\Common\Bin\WinRemote.exe O4 - HKLM\..\Run: [pccguide.exe] "C:\Programfiler\Trend Micro\Internet Security 14\pccguide.exe" O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FELLES~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programfiler\Fellesfiler\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [SlipStream] "C:\Programfiler\SlipStream Web Accelerator\slipcore.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Programfiler\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Programfiler\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Programfiler\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [swg] C:\Programfiler\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programfiler\Hp\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Hurtigstart for Adobe Reader.lnk = C:\Programfiler\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: PC-søk i Windows.lnk = C:\Programfiler\MSN Toolbar Suite\DS\02.05.0001.1119\nb-no\bin\WindowsSearch.exe O8 - Extra context menu item: &MSN Search - res://C:\Programfiler\MSN Toolbar Suite\TB\02.05.0000.1105\nb-no\msntb.dll/search.htm O8 - Extra context menu item: Åpne i ny bakgrunnsflik - res://C:\Programfiler\MSN Toolbar Suite\TAB\02.05.0000.1105\nb-no\msntabres.dll/229?fbb2cffdeb954cf4906af0f941b31629 O8 - Extra context menu item: Åpne i ny forgrunnsflik - res://C:\Programfiler\MSN Toolbar Suite\TAB\02.05.0000.1105\nb-no\msntabres.dll/230?fbb2cffdeb954cf4906af0f941b31629 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programfiler\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programfiler\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.tiscali.co.uk/ O16 - DPF: {106E49CF-797A-11D2-81A2-00E02C015623} (AlternaTIFF ActiveX) - http://www.alternatiff.com/install/00/alttiff.cab O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Programfiler\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Programfiler\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Programfiler\HPQ\SHARED\HPQWMI.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programfiler\Fellesfiler\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Computer, Inc. - C:\Programfiler\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programfiler\Fellesfiler\LightScribe\LSSrvc.exe O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programfiler\Fellesfiler\Symantec Shared\Security Center\SymWSC.exe O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe uninstall list Ad-Aware SE Personal Adobe Download Manager 2.0 (kun avinstallering) Adobe Reader 7.0.9 - Norsk Apple Software Update Athlon 64 Processor Driver ATI Display Driver ATI Kontrollpanel AVG Anti-Spyware 7.5 Conexant AC-Link Audio GdiplusUpgrade GENViewer Lite 1.13 Google Toolbar for Internet Explorer High Definition Audio Driver Package - KB835221 HijackThis 1.99.1 HP Help and Support HP Image Zone 4.8.5 HP Image Zone Plus 4.8.5 HP Software Update HP User Guides 0008 HP Wireless Assistant 1.01 C1 HPIZplus450 Hurtigreparasjon for Windows XP (KB896256) InterVideo Home Theater InterVideo WinDVD iPod for Windows 2006-03-23 iTunes J2SE Runtime Environment 5.0 Update 10 J2SE Runtime Environment 5.0 Update 5 J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 7 J2SE Runtime Environment 5.0 Update 9 LiveUpdate 2.6 (Symantec Corporation) Macromedia Flash Player 8 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft .NET Framework 1.1 Norwegian Language Pack Microsoft Office PowerPoint Viewer 2003 Microsoft Office Word Viewer 2003 Microsoft Works MSN Search Toolbar MSXML 4.0 SP2 (KB927978) Norton Security Center Oppdatering for Windows XP (KB894391) Oppdatering for Windows XP (KB898461) Oppdatering for Windows XP (KB900485) Oppdatering for Windows XP (KB910437) Oppdatering for Windows XP (KB916595) Oppdatering for Windows XP (KB920872) Oppdatering for Windows XP (KB922582) Panda ActiveScan Pcast P2P Á÷ýÌå¿Ø¼þ 1.0.0.16 PPStream Quick Launch Buttons 5.20 D2 QuickTime Sikkerhetsoppdatering for Windows Media Player (KB911564) Sikkerhetsoppdatering for Windows Media Player 10 (KB911565) Sikkerhetsoppdatering for Windows Media Player 10 (KB917734) Sikkerhetsoppdatering for Windows Media Player 6.4 (KB925398) Sikkerhetsoppdatering for Windows XP (KB883939) Sikkerhetsoppdatering for Windows XP (KB890046) Sikkerhetsoppdatering for Windows XP (KB893066) Sikkerhetsoppdatering for Windows XP (KB893756) Sikkerhetsoppdatering for Windows XP (KB896358) Sikkerhetsoppdatering for Windows XP (KB896422) Sikkerhetsoppdatering for Windows XP (KB896423) Sikkerhetsoppdatering for Windows XP (KB896424) Sikkerhetsoppdatering for Windows XP (KB896428) Sikkerhetsoppdatering for Windows XP (KB899587) Sikkerhetsoppdatering for Windows XP (KB899591) Sikkerhetsoppdatering for Windows XP (KB900725) Sikkerhetsoppdatering for Windows XP (KB901017) Sikkerhetsoppdatering for Windows XP (KB901190) Sikkerhetsoppdatering for Windows XP (KB901214) Sikkerhetsoppdatering for Windows XP (KB902400) Sikkerhetsoppdatering for Windows XP (KB904706) Sikkerhetsoppdatering for Windows XP (KB905414) Sikkerhetsoppdatering for Windows XP (KB905749) Sikkerhetsoppdatering for Windows XP (KB905915) Sikkerhetsoppdatering for Windows XP (KB908519) Sikkerhetsoppdatering for Windows XP (KB908531) Sikkerhetsoppdatering for Windows XP (KB911280) Sikkerhetsoppdatering for Windows XP (KB911562) Sikkerhetsoppdatering for Windows XP (KB911567) Sikkerhetsoppdatering for Windows XP (KB911927) Sikkerhetsoppdatering for Windows XP (KB912812) Sikkerhetsoppdatering for Windows XP (KB912919) Sikkerhetsoppdatering for Windows XP (KB913446) Sikkerhetsoppdatering for Windows XP (KB913580) Sikkerhetsoppdatering for Windows XP (KB914388) Sikkerhetsoppdatering for Windows XP (KB914389) Sikkerhetsoppdatering for Windows XP (KB916281) Sikkerhetsoppdatering for Windows XP (KB917159) Sikkerhetsoppdatering for Windows XP (KB917344) Sikkerhetsoppdatering for Windows XP (KB917422) Sikkerhetsoppdatering for Windows XP (KB917953) Sikkerhetsoppdatering for Windows XP (KB918439) Sikkerhetsoppdatering for Windows XP (KB918899) Sikkerhetsoppdatering for Windows XP (KB919007) Sikkerhetsoppdatering for Windows XP (KB920213) Sikkerhetsoppdatering for Windows XP (KB920214) Sikkerhetsoppdatering for Windows XP (KB920670) Sikkerhetsoppdatering for Windows XP (KB920683) Sikkerhetsoppdatering for Windows XP (KB920685) Sikkerhetsoppdatering for Windows XP (KB921398) Sikkerhetsoppdatering for Windows XP (KB921883) Sikkerhetsoppdatering for Windows XP (KB922616) Sikkerhetsoppdatering for Windows XP (KB922760) Sikkerhetsoppdatering for Windows XP (KB922819) Sikkerhetsoppdatering for Windows XP (KB923191) Sikkerhetsoppdatering for Windows XP (KB923414) Sikkerhetsoppdatering for Windows XP (KB923689) Sikkerhetsoppdatering for Windows XP (KB923694) Sikkerhetsoppdatering for Windows XP (KB923980) Sikkerhetsoppdatering for Windows XP (KB924191) Sikkerhetsoppdatering for Windows XP (KB924270) Sikkerhetsoppdatering for Windows XP (KB924496) Sikkerhetsoppdatering for Windows XP (KB925454) Sikkerhetsoppdatering for Windows XP (KB925486) Sikkerhetsoppdatering for Windows XP (KB926255) Sikkerhetsoppdatering for Windows XP (KB929969) Soft Data Fax Modem with SmartCP Sonic Audio Module Sonic Copy Module Sonic Data Module Sonic Express Labeler Sonic MyDVD Plus Sonic Update Manager SopCast 0.9.9 SUPERAntiSpyware Free Edition Synaptics Pointing Device Driver Tele2 Signup Texas Instruments PCIxx21/x515 drivers. Tiscali Web Accelerator Trend Micro PC-cillin Internet Security 14 TVAnts 1.0 Windows Installer 3.1 (KB893803) Windows Media Format Runtime Windows Media Player 10 Windows XP hurtigreparasjon - KB873333 Windows XP hurtigreparasjon - KB873339 Windows XP hurtigreparasjon - KB883667 Windows XP hurtigreparasjon - KB884575 Windows XP hurtigreparasjon - KB885250 Windows XP hurtigreparasjon - KB885464 Windows XP hurtigreparasjon - KB885835 Windows XP hurtigreparasjon - KB885836 Windows XP hurtigreparasjon - KB885855 Windows XP hurtigreparasjon - KB885884 Windows XP hurtigreparasjon - KB886185 Windows XP hurtigreparasjon - KB887472 Windows XP hurtigreparasjon - KB887742 Windows XP hurtigreparasjon - KB888113 Windows XP hurtigreparasjon - KB888239 Windows XP hurtigreparasjon - KB888302 Windows XP hurtigreparasjon - KB888402 Windows XP hurtigreparasjon - KB889673 Windows XP hurtigreparasjon - KB890859 Windows XP hurtigreparasjon - KB891781 Windows XP hurtigreparasjon - KB892559 |
|
|
Jan 31 2007, 10:15 AM
Post
#2
|
|
![]() Malware Surgeon Posts: 15,099 From: Worcestershire, England OS: Windows XP Professional SP2 |
God dag John and welcome to Geeks To Go
You are running HijackThis from its zipped archive; please create a new folder for it and unzip the programme into it. It is very important you do this before anything else! Rescan with HijackThis. Close all programmes leaving only HijackThis running. Place a checkmark or tick against the following: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.shtormmovies.com/ to verify your age, REQUIRED! WARNING! Adult pictures are featured in this site. Only adults permitted beyond this point! Are you at least 18 years old Click on Fix Checked when finished and exit HijackThis. Looking at your uninstall list, you can uninstall these: J2SE Runtime Environment 5.0 Update 5 J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 7 J2SE Runtime Environment 5.0 Update 9 I hope that fixes your problem. Hilsen. |
|
|
Feb 4 2007, 07:20 AM
Post
#3
|
|
|
New Member ![]() Posts: 2 OS: Windows XP |
Many thanks....did the trick.
Some appreciation on its way. |
|
|
Feb 4 2007, 07:40 AM
Post
#4
|
|
![]() Malware Surgeon Posts: 15,099 From: Worcestershire, England OS: Windows XP Professional SP2 |
Takk, thank you for your generosity.
Hilsen |
|
|
Feb 14 2007, 04:48 AM
Post
#5
|
|
![]() Malware Surgeon Posts: 15,099 From: Worcestershire, England OS: Windows XP Professional SP2 |
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic. |
|
|
![]() ![]() |
Similar Topics
| Topic Title | Replies / Views | Topic Information | |||||
|---|---|---|---|---|---|---|---|
![]() |
1 / 956 | 18th July 2008 - 04:26 PM thorncrown4 started - last by greyknight17 |
|||||
![]() |
6 / 1,214 | 27th July 2008 - 12:33 PM thorncrown4 started - last by fenzodahl512 |
|||||
![]() |
0 / 176 | 7th March 2009 - 08:54 PM nalgenie started - last by nalgenie |
|||||
![]() |
0 / 67 | 10th June 2009 - 04:28 PM strauzen started - last by strauzen |
|||||
|
Time is now: 5th July 2009 - 11:10 AM |
Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks mentioned on this page are the property of their respective owners.